Find work in Canada.

331,089 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Save this search

Added 2 mins ago
Senior Mulesoft Software Engineer
Manulife
Toronto, ON · Waterloo, ON
Full-time
Implement and enhance CI/CD pipelines, Infrastructure as Code (IaC), automation, and DevOps best practices to improve delivery efficiency and platform reliability.
Added 17 mins ago
Devops Developer
Ericsson
Quebec, QC
Full-time
À propos de l'opportunité Basé(e) à Montréal, vous rejoindrez une équipe Agile DevOps en tant que membre contributeur à part entière dès le premier jour. Il s'agit d'un rôle pratique : vous…
Added 17 mins ago
Développeur Java Senior
Mantu Manager Program
Montreal, QC
Contract
Appliquer les principes Agile et les pratiques DevOps tout au long du cycle de développement.
Added 17 mins ago
DevOps Engineer, New Grad
Jobright.ai
Canada
Full-time
…accelerating your route to the best job outcomes. As a New Grad DevOps Engineer, you will help build and operate the infrastructure behind our AI-powered job search platform, focusing on…
Added 17 mins ago
React Native Full Stack Developer (GraphQL, Firebase, AWS, AI-enabled Dev.)
Experis
Toronto, ON · Greater Toronto Area, Canada
$70 to $90 CAD / hour
Contract
React Native Full Stack Developer (GraphQL, Firebase, AWS, AI-enabled development)
Added 17 mins ago
Senior Mobile Developer
Pillway
Brampton, ON
Full-time
We are seeking a highly skilled Senior Mobile Developer with 4+ years of experience to join our core engineering team. This role is pivotal for owning and driving the development of our…
Added 31 mins ago
Senior Business Systems Analyst – Customer Identity & Access Management (Hybrid)
Redolent, Inc
Toronto, ON
Contract
DevOps practices including CI/CD, Jenkins, test automation
Added 1 hour ago
Senior Business Analyst
COFOMO
Quebec, QC
Full-time
Have participated in a mandate of more than six (6) months using Azure DevOps.
Added 1 hour ago
Senior Developer
COFOMO
Quebec, QC
Full-time
Experience with Azure DevOps, a source code management tool (Git or TFS) as well as an Agile methodology.
Added 1 hour ago
Senior Software Engineer, DevOps & Security
Toast
Vancouver, BC
$140,000 to $230,000 USD / year
Full-time
…recent acquisitions. They are hiring a Senior Software Engineer, DevOps & Security to make the right way to build and ship the easy way for every engineer, working alongside the DevOps…
Added 2 hours ago
Full Stack Software Developer -
J&M Group
Toronto, ON
Full-time
Working familiarity with CI/CD pipelines (e.g., Azure DevOps) sufficient to integrate with an existing pipeline maintained by a separate team
Added 2 hours ago
Project Manager (AI-DLC Program)
Royal Bank of Canada
Toronto, ON
Full-time
We are seeking a Project Manager to lead the delivery of strategic initiatives across our enterprise DevOps ecosystem. This role is responsible for coordinating complex, cross-functional…
Added 2 hours ago
Lead Project Manager - (AI-DLC)
Royal Bank of Canada
Toronto, ON
Full-time
We are seeking a Lead Project Manager to lead the delivery of strategic initiatives across our enterprise DevOps ecosystem. This role is responsible for coordinating complex,…
Added 2 hours ago
Devops Developer
Ericsson
Bas-Saint-Laurent, QC
Full-time
À propos de l'opportunité Basé(e) à Montréal, vous rejoindrez une équipe Agile DevOps en tant que membre contributeur à part entière dès le premier jour. Il s'agit d'un rôle pratique : vous…
Added 2 hours ago
Gestionnaire principal TI, Architecture d’entreprise
Saputo Inc.
Bas-Saint-Laurent, QC
Full-time
Familiarity with Agile and DevOps methodologies.
Added 2 hours ago
Devops Developer
Ericsson
Montreal, QC
Full-time
À propos de l'opportunité Basé(e) à Montréal, vous rejoindrez une équipe Agile DevOps en tant que membre contributeur à part entière dès le premier jour. Il s'agit d'un rôle pratique : vous…
Added 2 hours ago
Développeur Java Senior
Amaris Consulting
Montreal, QC
Full-time
Appliquer les principes Agile et les pratiques DevOps tout au long du cycle de développement.
Added 2 hours ago
Gestionnaire principal TI, Architecture d’entreprise
Saputo Inc.
Georgetown, ON
Full-time
Familiarity with Agile and DevOps methodologies.
Added 2 hours ago
Software Engineer I
TD
Toronto, ON
Full-time
Full stack developer spending time on Coding, designing/solution, analysis and documentation.
Added 2 hours ago
Quality Engineering III
TD
Toronto, ON
Full-time
Ensure quality of source code; look for opportunities to effectively leverage tools and engineering practices such as DevOps tools and processes, service virtualization, monitoring tools…
Added 2 hours ago
Senior IT Developer
TD
Toronto, ON
Full-time
Minimum of 3-5 years of strong hands-on developer experience
Added 2 hours ago
Senior DevOps Engineer
Motorola Solutions
Vancouver, BC
Full-time
We are seeking a highly experienced and passionate Senior DevOps Engineer to join our team. In this pivotal role, you will be instrumental in evaluating, consolidating, and designing the…
Added 3 hours ago
Enterprise Applications Analyst
Robert Half
Calgary, AB
Full-time
Added 3 hours ago
Industrial Software Validation|
Husky Technologies
Bolton, ON
Full-time
Experience with Agile/Scrum practices and Azure DevOps tools
Added 3 hours ago
Senior Enterprise Account Executive
Harness
Toronto, ON
Full-time
…up to 75%, reduce cloud costs by up to 60%, and achieve 10x DevOps…

Insight Global

Head of Information Security and Compliance

Canada

Job type: Full-time
Experience: 7+ years of progressive information security experience, including leadership responsibilities.
Posting language: English
Posted: Sep 21, 2026

Apply About employer

Applications open in a new tab.

Original job description

JOB DESCRIPTION

Insight Global is seeking a Head of Information Security and Compliance to join a leading financial technology organization in a net new position. This individual will report to the CIO and serve as a senior security leader responsible for establishing, maturing, and operationalizing the organization's security program. The initial focus will be supporting a major TSA (Transition Services Agreement) separation, ensuring security capabilities have clear ownership, governance, and operational readiness. This is a highly hands-on, role that partners closely with infrastructure, cloud, DevOps, application development, and business leaders to drive security strategy, risk management, operational security, and compliance initiatives. The ideal candidate will be comfortable remaining technical while building toward a future security function, with a focus on practical security rather than heavy governance or committee-driven leadership.

Day to Day:

Lead the security workstream associated with TSA separation activities, ensuring all security capabilities have documented ownership and transition plans.

Develop and maintain security policies, standards, controls, and exception management processes that align with business objectives and regulatory requirements.

Own security risk governance including risk registers, remediation tracking, executive reporting, and risk treatment plans.

Establish and oversee security operations and incident response processes across internal teams and external partners.

Drive vulnerability management programs, including prioritization, remediation tracking, risk acceptance processes, and security posture reporting.

Provide security guidance for cloud, application, and data initiatives, ensuring security requirements are incorporated into architecture and design decisions.

Partner closely with cloud infrastructure and DevOps teams to maintain secure AWS environments and strengthen cloud security controls.

Support secure software development practices by implementing security scanning, assessing vulnerabilities within development workflows, and promoting secure coding standards.

Evaluate and recommend security tools, including static analysis and application security solutions, to improve overall security posture.

Support client, lender, audit, compliance, and regulatory requests by maintaining accurate security evidence, documentation, and due diligence responses.

Assess and manage third-party security risks for vendors, cloud providers, and technology partners.

Review security assessments and reports, providing actionable recommendations to reduce risk and improve operational effectiveness.

Develop security awareness programs and partner with technical teams to strengthen security culture across the organization.

Create and execute a long-term enterprise security roadmap supporting business growth, technology modernization initiatives, and future expansion across affiliated organizations.

REQUIRED SKILLS AND EXPERIENCE

7+ years of progressive information security experience, including leadership responsibilities.

Experience building, maturing, or significantly transforming security programs within mid-sized organizations.

Strong knowledge of security governance, risk management, compliance frameworks, incident response, vulnerability management, and security operations.

Experience working across cloud, infrastructure, application security, identity and access management, and security operations domains.

Hands-on experience supporting secure application development, security scanning, vulnerability remediation, and secure SDLC practices.

Experience reviewing security assessments, risk reports, and customer due diligence questionnaires.

Background supporting audits, customer due diligence, regulatory compliance, and security assessments.

Strong understanding of security architecture, cloud security principles, and risk management methodologies.

Excellent stakeholder management and executive communication skills.

Ability to operate in a hands-on, player-coach leadership environment with little to no direct management responsibility.

Comfort working in fast-paced environments where security must enable business growth and product delivery.

NICE TO HAVE SKILLS AND EXPERIENCE

Experience leading security initiatives during TSA separations, mergers, acquisitions, or large-scale organizational transitions.

Financial services, fintech, mortgage lending, or other regulated industry experience.

Experience working with AWS environments and cloud-native security controls.

Experience partnering with DevOps teams and implementing DevSecOps practices.

Experience evaluating or implementing static application security testing (SAST) and code-scanning tools.

CISSP, CISM, CRISC, or equivalent security certifications.

As part of our recruitment process, AI-assisted tools may be used to support candidate screening, resume review, interview note-taking, and application evaluation. These tools are intended to help improve efficiency and consistency throughout the hiring process. All hiring decisions remain subject to human review, and candidates are assessed based on their qualifications, skills, experience, and alignment with the requirements of the position.

Apply About employer

More about this job

Responsibilities

The Head of Information Security and Compliance will lead the security workstream for TSA separation and establish the organization's security program. They will manage security risk, governance, and operational readiness while partnering with technical teams to drive security strategy.

Requirements

Candidates must have 7+ years of progressive information security experience, including leadership roles and experience transforming security programs. Strong knowledge of security frameworks, cloud security, and risk management methodologies is required.

Skills

Information security
Risk management
Compliance
Security governance
Incident response
Vulnerability management
Cloud security
AWS
DevSecOps
Application security
Security architecture
Stakeholder management
Security policies
Security awareness
Identity and access management

Visa sponsorship

Not detected in the job text

Keywords

Information Security
Compliance
TSA Separation
Governance
Risk Management
Security Operations
Incident Response
Vulnerability Management
Cloud Security
AWS
DevOps
Application Security
Secure SDLC
SAST
CISSP
CISM
CRISC
Fintech
Security Architecture
Identity and Access Management
Security Awareness
Risk Register
Security Controls
Third-party Risk
Regulatory Compliance

Report this job